JAAS / Client IP ?

[Russell Beall]

I have done that exact logging for our security group and we have very clear logs for exactly which user ID authenticates from exactly which IP address.

I had to use the MDC to get the IP address attached to each log line as part of the logging configuration as Brad mentioned, and I wrote a custom log line into our login handler that prints out the username.  I like having the REFERER header printed out in some cases as well because it has helped me debug some issues where users are coming in from unexpected directions.

None of this was directly in the JAAS part of the login process which I did not customize at all; it has all been in the LoginHandler and LoginServlet custom code.

Regards,
Russ.

=========================
Russell Beall  |  Systems Programmer IV    
Enterprise Identity Management | University of Southern California    
(213) 740-7221  |  beall at usc.edu  






> On Aug 18, 2015, at 9:03 AM, Schwoerer, Brad <schwoerb at uww.edu> wrote:
> 
> It can be added ...
> 
> https://wiki.shibboleth.net/confluence/display/IDP30/LoggingConfiguration
> 
> 
> 
> On 8/18/15, 11:00 AM, "dev on behalf of James Drews"
> <dev-bounces at shibboleth.net on behalf of james.drews at wisc.edu> wrote:
> 
>> That would be an option, but I'm not seeing that info in the logs either
>> (idp-process or idp-audit).
>> 
>> 
>> -----Original Message-----
>> 
>> I don't believe you can, not without IdP code changes anyway.
>> 
>> Why not just use the IdP logs for this?
>> 
>> -- Scott
>> 
>> -- 
>> To unsubscribe from this list send an email to
>> dev-unsubscribe at shibboleth.net
>> -- 
>> To unsubscribe from this list send an email to
>> dev-unsubscribe at shibboleth.net
> 
> -- 
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net